-
Notifications
You must be signed in to change notification settings - Fork 11
Broken DataSource Variables in DMARC Reports Dashboard #16
Copy link
Copy link
Open
Description
I had some problems with getting the Parsedmarc Dashboard running correctly with Elasticsearch 7 and current Grafana.
In hindsight there were 2 big problems.
- MY DataSource names for the Variables for "Aggregate" and "Forensic" did not match the "Variable regex".
- Because of this they were not found and I didnt notice because they are hidden by default..
- Fixed it by changing the regex to be case insensitive and "more generic" (I only have 2 ES-datasources anyway)
- OLD:
"regex": "/.*dmarc-ag/"AND"regex": "/.*dmarc-fo/" - NEW:
"regex": "/.*agg.*/i"AND"regex": "/.*for.*/i",
- Some of the DataSource variables were incorrect and tried to reference the "Import Variable"
${DS_ELASTICSEARCH-DMARC-AG}or${DS_ELASTICSEARCH-DMARC-FO}.- This would mean they got replaced with "constant values" on Import and break the dashboard.
- Fixed it by replacing all these variables with respecetively
${datasourceag}and${datasourcefo}Variables BEFORE importing! - This way, these datasource will NOT get replaced on Import and it will work accordingly, even when used from "provisioning" directly.
Here is my final Dasboard:
DMARC_REPORTS_11227_rev7_FIXED.json
I hope this helps and can maybe get incorporated into your version :)
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels